Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationWhat Features does the AD Integration Need to Have?What Features does the AD Integration Need to Have?
Previous
 
Next
New Post
8/15/2006 6:02 PM
 
Support for multiple portals.  Currently AD does not create accounts/authenticate for sub-portals.  Thanks!!
 
New Post
8/15/2006 6:07 PM
 

Kevin,

This module does not store the AD password in the system so that should not be a concern. It just authenticates the user against the AD then stores a random password.  You can see this is true by logging in autmatically then request your password - what you will get is a random password.

Craig

 
New Post
8/15/2006 6:13 PM
 

Stuart,

  Here is a huge request for me.  I currently have a scenario where a parent portal does not use AUTH and a child portal does all under the same domain.  ( Reason: The parent portal serves as entry point for all the child portals ) Now if a user enters the parent portal for the first time everything is dandy. But if a user comes back later and enters the child portal they are forced to delete their cookie before automatic login will work again. 

I believe the reason why is the parent portal is screwing up the cookie.

Craig

 
New Post
8/16/2006 9:17 AM
 

hey craig,

it appears that DNN stores a hashed version of your AD password and that's why it appears as random characters in the db table.  if you click the "Forgot Password?" button it'll send you your AD password in clear text via email.  it's horrifying! 

i haven't looked at the source in a while but i believe it's hashing the password based on the machine key as a seed.  i don't know of any other way to retrieve your password from AD (you can only reset it in AD).

if your DNN install is set to authenticate against AD then why store any password at all in DNN?

kevin

 
New Post
8/18/2006 7:04 PM
 
As far as I can tell, it doesn't appear that the AD module goes through the membership provider to do it's work.  If that is the case, it would be a good thing to change so folks can keep all their custom membership logic in their custom provider.
 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationWhat Features does the AD Integration Need to Have?What Features does the AD Integration Need to Have?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out